Secure remote payment transaction processing using a secure element

Abstract

Embodiments of the present invention are directed to methods, apparatuses, computer readable media and systems for securely processing remote transactions. One embodiment of the invention is directed to a method of processing a remote transaction initiated by a mobile device. The method comprises receiving, by a mobile payment application on a secure memory of the mobile device, transaction data from a transaction processor application on the mobile device. The method further comprises validating that the transaction processor application is authentic and in response to validating the transaction processor application, providing encrypted payment credentials to the transaction processor application. The transaction processor application further initiates a payment transaction with a transaction processor server computer using the encrypted payment credentials.

What is claimed is: 
     
       1. A method comprising:
 selecting, by a transaction processor application in a communication device, items for purchase in a transaction at a merchant server computer; 
 wherein the communication device is a mobile phone; 
 wherein the communication device comprises a secure element; 
 identifying, by the transaction processor application in the communication device, a payment account; 
 communicating, by the transaction processor application, transaction data associated with the transaction to a payment application in the secure element on the communication device; 
 retrieving, by the payment application from the secure element in the communication device, a payment credential associated with the identified payment account; 
 sending, by the payment application in the secure element, the payment credential to the transaction processor application; 
 transmitting the payment credential, by the transaction processor application in the communication device, to the merchant server computer; 
 receiving, by the merchant server computer, the transmitted payment credential; and 
 initiating, by the merchant server computer, a payment transaction with the payment credential. 
 
     
     
       2. The method of  claim 1 , wherein the payment credential comprises a token. 
     
     
       3. The method of  claim 2 , wherein the transaction processor application is a merchant application. 
     
     
       4. The method of  claim 1 , further comprising:
 receiving, by the communication device, a selection of the payment account, the selection identifying the payment account. 
 
     
     
       5. The method of  claim 1 , wherein the payment credential is in encrypted form as the payment credential is transmitted from the communication device to the merchant server computer. 
     
     
       6. The method of  claim 1 , further comprising:
 receiving, by the payment application, signed transaction data from the transaction processor application; and 
 validating, by the payment application, the signed transaction data using a transaction processor public key before retrieving the payment credential from the secure element in the communication device. 
 
     
     
       7. A system comprising:
 a communication device comprising: 
 a first processor; and 
 a first non-transitory medium, the first non-transitory medium comprising instructions when executed by the first processor, causes the first processor to perform the steps of: 
 selecting, by a transaction processor application in the communication device, items for purchase in a transaction at a merchant server computer; 
 wherein the communication device is a mobile phone; 
 wherein the communication device comprises a secure element; 
 identifying, by the transaction processor application in the communication device, a payment account; 
 communicating, by the transaction processor application in the communication device, transaction data associated with the transaction to a payment application in the secure element on the communication device; 
 retrieving, by the payment application from the secure element in the communication device, a payment credential associated with the identified payment account; 
 sending, by the payment application in the secure element, the payment credential to the transaction processor application; and 
 transmitting the payment credential, by the transaction processor application in the communication device, to the merchant server computer; and 
 the merchant server computer, the merchant server computer comprising a second processor, and a second computer readable medium comprising code, executable by the second processor for performing steps including: initiating a payment transaction with the payment credential. 
 
     
     
       8. The system of  claim 7 , wherein the payment credential comprises a token. 
     
     
       9. The system of  claim 7 , wherein the transaction processor application is a merchant application. 
     
     
       10. The system of  claim 7 , wherein initiating the payment transaction with the payment credential includes generating an authorization request message comprising the payment credential. 
     
     
       11. The system of  claim 7 , wherein the steps further comprise:
 receiving a selection of the payment account from a user, the selection identifying the payment account.